
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3130332e3139372e3232382e302f32322d3232203d3e203233373731.roa
File: 3130332e3139372e3232382e302f32322d3232203d3e203233373731.roa (raw, json)
Hash identifier: XI6Tl/z1obuaHt4nr4OODzX7qb5AWUYtD4JUb20nlbU=
Subject key identifier: E0:99:17:1E:27:C6:11:5D:DE:AA:F7:59:8F:42:C5:E1:9A:5A:15:3A
Certificate issuer: /CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C
Certificate serial: 44A92EB3A350019AF7E856197A50C862BF863EC5
Authority key identifier: FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3130332e3139372e3232382e302f32322d3232203d3e203233373731.roa
Signing time: Tue 14 Apr 2026 02:17:59 +0000
ROA not before: Tue 14 Apr 2026 02:12:59 +0000
ROA not after: Tue 13 Apr 2027 02:17:59 +0000
asID: 23771
IP address blocks: 103.197.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:a9:2e:b3:a3:50:01:9a:f7:e8:56:19:7a:50:c8:62:bf:86:3e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C
Validity
Not Before: Apr 14 02:12:59 2026 GMT
Not After : Apr 13 02:17:59 2027 GMT
Subject: CN=E099171E27C6115DDEAAF7598F42C5E19A5A153A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:88:51:72:21:f7:3b:85:15:76:79:7d:99:a7:
a0:28:ca:9f:ae:0d:55:52:9f:29:44:96:ec:89:02:
65:bb:19:e5:e5:fd:8e:fa:88:ff:22:90:54:f2:85:
78:6f:36:04:11:5a:ff:46:81:48:d4:6f:9a:16:51:
72:5c:8e:f6:69:67:b0:3b:cf:c5:b9:0d:84:3a:d0:
5d:ab:84:64:68:f5:f9:b9:71:08:96:4b:63:91:e7:
9f:14:f8:18:83:ea:08:f3:ec:bd:7d:48:50:b0:75:
35:0d:bf:4c:ff:f7:a6:5c:94:31:1f:0a:70:cd:6e:
07:e5:3c:af:a3:54:cb:d9:9c:4c:f1:5d:67:a7:2b:
a1:b7:10:f6:16:12:2d:b1:df:4a:fd:a6:17:bf:83:
66:3e:51:63:a0:9e:d5:ed:43:9a:88:8d:57:73:b8:
46:2e:6c:db:12:87:0f:9a:ab:a1:9e:e5:a2:91:6d:
0c:76:44:44:65:0d:9b:6a:ea:57:b3:a0:17:54:f9:
bf:a0:bb:0e:2c:35:6e:cd:ff:b0:53:7b:1c:6b:33:
f3:36:a8:ff:6a:7e:9c:33:d3:b6:8a:e3:19:32:39:
a9:8d:bc:63:d8:ef:fc:66:56:a7:7d:23:71:49:99:
35:e0:de:f1:1c:26:44:3e:27:a8:41:ad:34:be:4c:
2b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:99:17:1E:27:C6:11:5D:DE:AA:F7:59:8F:42:C5:E1:9A:5A:15:3A
X509v3 Authority Key Identifier:
keyid:FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3130332e3139372e3232382e302f32322d3232203d3e203233373731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.197.228.0/22
Signature Algorithm: sha256WithRSAEncryption
09:86:99:21:0e:f5:83:73:82:57:06:53:37:e4:9c:3a:86:d9:
09:e0:89:67:7a:ab:76:5e:21:1e:5f:81:85:64:c3:03:06:e3:
2d:18:a9:4c:d0:d3:7d:78:66:68:aa:3d:44:c9:a7:26:4c:97:
d3:9a:99:33:2e:c1:f5:97:e9:45:87:56:8d:44:5f:c8:3f:24:
75:16:b3:76:7a:c7:b1:a3:de:21:d3:40:43:10:cc:84:60:cb:
36:c6:a4:2f:01:f8:3f:a4:71:26:25:1a:1c:80:2f:4c:12:17:
af:60:01:73:21:9b:d7:49:54:96:7c:ee:6c:9c:4b:b9:17:57:
ff:05:b7:a5:20:38:a1:76:ca:1c:63:42:b8:a1:8e:60:0b:24:
d3:b1:48:f1:fe:76:1a:9f:e4:c1:8a:92:13:ce:ab:63:5c:39:
c6:b0:e0:df:aa:26:43:5e:52:92:56:0c:5b:ba:e6:66:80:0d:
59:2f:3c:5e:c4:e7:81:b3:d8:c0:37:12:12:70:63:da:fe:8f:
15:22:35:44:cc:f1:ad:24:5b:5e:fe:39:96:86:74:b2:ce:88:
23:04:4c:0d:ee:2e:b3:41:41:8b:b1:6f:ce:c9:bc:37:2c:5c:
66:d2:da:af:a5:f6:4a:d7:94:2a:4a:02:8f:7e:c2:66:dd:b5:
47:13:59:c2
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIURKkus6NQAZr36FYZelDIYr+GPsUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI3Qjc5NEYxMjM3MjVGRTgwMEE2NDdGM0Y3RThCRTk5
QjFGNUIyQzAeFw0yNjA0MTQwMjEyNTlaFw0yNzA0MTMwMjE3NTlaMDMxMTAvBgNV
BAMTKEUwOTkxNzFFMjdDNjExNURERUFBRjc1OThGNDJDNUUxOUE1QTE1M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaiFFyIfc7hRV2eX2Zp6Aoyp+u
DVVSnylEluyJAmW7GeXl/Y76iP8ikFTyhXhvNgQRWv9GgUjUb5oWUXJcjvZpZ7A7
z8W5DYQ60F2rhGRo9fm5cQiWS2OR558U+BiD6gjz7L19SFCwdTUNv0z/96ZclDEf
CnDNbgflPK+jVMvZnEzxXWenK6G3EPYWEi2x30r9phe/g2Y+UWOgntXtQ5qIjVdz
uEYubNsShw+aq6Ge5aKRbQx2RERlDZtq6lezoBdU+b+guw4sNW7N/7BTexxrM/M2
qP9qfpwz07aK4xkyOamNvGPY7/xmVqd9I3FJmTXg3vEcJkQ+J6hBrTS+TCv3AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU4JkXHifGEV3eqvdZj0LF4ZpaFTowHwYDVR0j
BBgwFoAU+3t5TxI3Jf6ACmR/P36L6ZsfWywwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjcyMzM3MjA0ODM4Ni8wL0ZCN0I3OTRGMTIzNzI1RkU4MDBBNjQ3RjNGN0U4
QkU5OUIxRjVCMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkI3Qjc5NEYxMjM3MjVGRTgwMEE2NDdGM0Y3RThCRTk5QjFGNUIyQy5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIwNDgzODYvMC8zMTMwMzMyZTMx
MzkzNzJlMzIzMjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzMzM3MzczMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmfF5DANBgkqhkiG9w0BAQsFAAOCAQEACYaZIQ71g3OCVwZTN+Sc
OobZCeCJZ3qrdl4hHl+BhWTDAwbjLRipTNDTfXhmaKo9RMmnJkyX05qZMy7B9Zfp
RYdWjURfyD8kdRazdnrHsaPeIdNAQxDMhGDLNsakLwH4P6RxJiUaHIAvTBIXr2AB
cyGb10lUlnzubJxLuRdX/wW3pSA4oXbKHGNCuKGOYAsk07FI8f52Gp/kwYqSE86r
Y1w5xrDg36omQ15SklYMW7rmZoANWS88XsTngbPYwDcSEnBj2v6PFSI1RMzxrSRb
Xv45loZ0ss6IIwRMDe4us0FBi7Fvzsm8NyxcZtLar6X2SteUKkoCj37CZt21RxNZ
wg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:30:28 2026 by rpki-client